Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
4dc62967 by Salvatore Bonaccorso at 2026-10-10T09:48:02+02:00
Add CVE-2026-102554/guava-libraries
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -789,7 +789,10 @@ CVE-2026-103220 (The Affinity by Canva application before
3.3.1 (October 2026 re
CVE-2026-102916 (A reachable assertion in the illumos bhyve instruction
emulator allows ...)
NOT-FOR-US: illumos
CVE-2026-102554 (Allocation of resources without limits or throttling
(CWE-770) during ...)
- TODO: check
+ - guava-libraries <unfixed>
+ NOTE:
https://github.com/google/guava/security/advisories/GHSA-xxph-c9ww-hj94
+ NOTE: Fixed by:
https://github.com/google/guava/commit/b931fe9d6d5cf00bc55714ad3308d086f71850fe
(master)
+ NOTE: Fixed by:
https://github.com/google/guava/commit/a0d0c36432c4cc7aa4b5063bab9f20d3d18fe9fc
(v33.7.2)
CVE-2026-101130 (The Affinity by Canva application before 3.3.1 (October 2026
release) ...)
NOT-FOR-US: Canva
CVE-2026-101094 (The Affinity by Canva application before 3.3.1 (October 2026
release) ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/4dc6296700b10f60874ccf11b4f72a6721b3a62d
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/4dc6296700b10f60874ccf11b4f72a6721b3a62d
You're receiving this email because of your account on salsa.debian.org. Manage
all notifications: https://salsa.debian.org/-/profile/notifications | Help:
https://salsa.debian.org/help
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
